WEBVTT NOTE This file was exported by MacCaption version 7.0.06 to comply with the WebVTT specification dated March 27, 2017. 00:00:05.714 --> 00:00:06.924 align:center line:-1 position:50% size:38% Hi, my name is Dick Ludwig. 00:00:06.924 --> 00:00:09.509 align:center line:-1 position:50% size:51% I'm a Business Development Manager at Keysight Technologies 00:00:09.509 --> 00:00:12.012 align:center line:-1 position:50% size:48% in the area of autonomous vehicles and 00:00:12.012 --> 00:00:14.723 align:center line:-1 position:50% size:64% I specifically deal with automotive cybersecurity. 00:00:14.723 --> 00:00:17.100 align:center line:-1 position:50% size:64% As cars are growing more and more connected, 00:00:17.100 --> 00:00:20.562 align:center line:-1 position:50% size:61% some of the things that we're seeing is that there are more and more opportunities 00:00:20.562 --> 00:00:25.859 align:center line:-1 position:50% size:54% for cybercriminals to gain access to either a vehicle's information systems 00:00:25.859 --> 00:00:27.778 align:center line:-1 position:50% size:40% or a vehicle's control systems. 00:00:27.778 --> 00:00:31.448 align:center line:-1 position:50% size:58% Obviously, the nightmare-type control issue would be a cybercriminal 00:00:31.448 --> 00:00:33.283 align:center line:-1 position:50% size:37% taking control of the brakes while you're driving 00:00:33.283 --> 00:00:37.621 align:center line:-1 position:50% size:55% or disabling the brake lights so that the car behind you rear-ends you. 00:00:37.621 --> 00:00:40.707 align:center line:-1 position:50% size:50% Obviously, you could have somebody take control of the steering 00:00:40.707 --> 00:00:42.376 align:center line:-1 position:50% size:35% and drive you off the road. 00:00:42.376 --> 00:00:44.378 align:center line:-1 position:50% size:53% Some of those are less likely to happen 00:00:44.378 --> 00:00:47.506 align:center line:-1 position:50% size:51% because they're more higher priorities for the automakers, 00:00:47.506 --> 00:00:50.425 align:center line:-1 position:50% size:45% but some of the things that you could see happen very easily, 00:00:50.425 --> 00:00:53.470 align:center line:-1 position:50% size:57% you connect your phone to your rental car. 00:00:53.470 --> 00:00:56.556 align:center line:-1 position:50% size:39% You bring that rental car back into the rental car dealership, 00:00:56.556 --> 00:00:58.600 align:center line:-1 position:50% size:35% and then somebody either at the dealership 00:00:58.600 --> 00:01:03.438 align:center line:-1 position:50% size:56% or the next user of that rental car, actually steals access to your contact information. 00:01:03.438 --> 00:01:06.024 align:center line:-1 position:50% size:43% There are a lot of different levels that we can talk about 00:01:06.024 --> 00:01:09.611 align:center line:-1 position:50% size:50% when we talk about how a cybercriminal can attack a vehicle. 00:01:09.611 --> 00:01:12.531 align:center line:-1 position:50% size:66% As far as taking control of a vehicle is concerned, 00:01:12.531 --> 00:01:14.866 align:center line:-1 position:50% size:38% there are multiple interfaces. 00:01:14.866 --> 00:01:19.830 align:center line:-1 position:50% size:51% We have Wi-Fi interfaces in cars now, Bluetooth, Bluetooth Low Energy, 00:01:19.830 --> 00:01:23.500 align:center line:-1 position:50% size:47% cellular accesses, both 4G and 5G. 00:01:23.500 --> 00:01:29.756 align:center line:-1 position:50% size:61% We have CANbus. CANbus is a legacy bus that controls most of the vehicle's control systems. 00:01:29.756 --> 00:01:33.593 align:center line:-1 position:50% size:44% There's a very easy access point in most vehicles for the CANbus 00:01:33.593 --> 00:01:35.387 align:center line:-1 position:50% size:29% called the OBD2 port. 00:01:35.387 --> 00:01:40.100 align:center line:-1 position:50% size:51% It's something that service centers use to diagnose issues with the vehicle. 00:01:40.100 --> 00:01:43.520 align:center line:-1 position:50% size:58% You can plug something into the OBD2 port 00:01:43.520 --> 00:01:47.190 align:center line:-1 position:50% size:59% and you can gain access to a stream of data coming out of the vehicle, 00:01:47.190 --> 00:01:48.608 align:center line:-1 position:50% size:45% but that can get you onto the bus, 00:01:48.608 --> 00:01:54.156 align:center line:-1 position:50% size:67% and getting you onto the bus is really the first step into taking control of the vehicle. 00:01:54.156 --> 00:01:58.118 align:center line:-1 position:50% size:43% Almost all the systems on a car are on either a different network 00:01:58.118 --> 00:02:00.787 align:center line:-1 position:50% size:61% or they're in a different portion of the network. 00:02:00.787 --> 00:02:03.332 align:center line:-1 position:50% size:42% It's not like you're taking control of a central computer. 00:02:03.332 --> 00:02:06.001 align:center line:-1 position:50% size:33% There are multiple ECUs (electronic control units) 00:02:06.001 --> 00:02:07.669 align:center line:-1 position:50% size:30% throughout the vehicle 00:02:07.669 --> 00:02:09.921 align:center line:-1 position:50% size:35% or telematics control units throughout the vehicle. 00:02:09.921 --> 00:02:15.093 align:center line:-1 position:50% size:50% You would most likely be accessing one of those vehicle subcomponents. 00:02:15.093 --> 00:02:18.013 align:center line:-1 position:50% size:36% For a moving vehicle, it's obviously more difficult. 00:02:18.013 --> 00:02:20.349 align:center line:-1 position:50% size:51% The most nightmare control scenarios that we talked about 00:02:20.349 --> 00:02:22.476 align:center line:-1 position:50% size:50% were steering the drivers off the road, 00:02:22.476 --> 00:02:23.977 align:center line:-1 position:50% size:29% disabling brake lights. 00:02:23.977 --> 00:02:27.189 align:center line:-1 position:50% size:50% Something like that would have to be something where 00:02:27.189 --> 00:02:30.567 align:center line:-1 position:50% size:53% somebody gained access to the vehicle while it was stationary, 00:02:30.567 --> 00:02:34.071 align:center line:-1 position:50% size:46% input some kind of malicious code into the vehicle itself, 00:02:34.071 --> 00:02:38.158 align:center line:-1 position:50% size:52% and then took control of the vehicle through that malicious code they input. 00:02:38.158 --> 00:02:41.453 align:center line:-1 position:50% size:47% It's unlikely that somebody is going to be able to access your vehicle 00:02:41.453 --> 00:02:42.788 align:center line:-1 position:50% size:27% while you're driving. 00:02:42.788 --> 00:02:45.207 align:center line:-1 position:50% size:38% It's not impossible because of all the different interfaces, 00:02:45.207 --> 00:02:46.833 align:center line:-1 position:50% size:29% but it's just less likely. 00:02:46.833 --> 00:02:49.002 align:center line:-1 position:50% size:70% Obviously, the OEMs [original equipment manufactureres] are very concerned about this. 00:02:49.002 --> 00:02:51.213 align:center line:-1 position:50% size:48% It very much affects their reputation. 00:02:51.213 --> 00:02:55.425 align:center line:-1 position:50% size:43% Car buyers are loyal to OEMs and that loyalty only goes so far. 00:02:55.425 --> 00:02:58.929 align:center line:-1 position:50% size:65% If you hear that one of the Big Three got hacked, 00:02:58.929 --> 00:03:01.973 align:center line:-1 position:50% size:44% you might be more inclined to buy from one of the other two. 00:03:01.973 --> 00:03:04.017 align:center line:-1 position:50% size:48% Obviously, this industry is changing. 00:03:04.017 --> 00:03:06.978 align:center line:-1 position:50% size:47% OEMs and Tier 1 suppliers are now coming to the realization 00:03:06.978 --> 00:03:10.565 align:center line:-1 position:50% size:66% that they're going to have to secure their vehicles against cybercriminals. 00:03:10.565 --> 00:03:14.569 align:center line:-1 position:50% size:57% Cybercriminals didn't used to have access to systems like power steering. 00:03:14.569 --> 00:03:17.656 align:center line:-1 position:50% size:44% Power steering is now controlled by an electronics control unit, 00:03:17.656 --> 00:03:19.199 align:center line:-1 position:50% size:38% which is a hackable system. 00:03:19.199 --> 00:03:21.493 align:center line:-1 position:50% size:64% It's something that a cybercriminal can get into, 00:03:21.493 --> 00:03:23.995 align:center line:-1 position:50% size:47% and it's something that the industry is having to adapt to 00:03:23.995 --> 00:03:25.789 align:center line:-1 position:50% size:47% and they're having to adapt quickly.